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• (TS//SI//NF) Contrast the differences in the authorities granted between BR FISC 
Orders and PR/TT FISC Orders 


(U) Present learning objectives in the travel 
journal 


• (TS//SI//NF) Recognize the role of the Bulk Metadata Programs in the context of the 


broader set of SIGINT authorities 





( TS//S I //NF ) (OGC Attorney): During the first part of our road trip we will discuss the Business Records (BR) and Pen Register T rap and T race (PR/TT) 
Bulk Metadata Programs at a high level. As we progress on our road trip, we will discuss various aspects of the authorities granted by the Foreign 
Intelligence Surveillance Court (FISC) which support the BR and PR/TT programs and the policies that NSA implements to provide reasonable assurance 
that we are compliant with these authorities. 
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(U) This module will enable you to: 

• ( TS//S I //NF ) Identify the purpose of the BR and PR/TT Bulk Metadata Programs 

• (TS//SI//NF) Identify the ^[Foreign Powers covered by the BR and PR/TT Foreign Intelligence Surveillance Court (FISC) Orders 

• (TS//SI/7NF)^^^^^^^^^^^^|in the authorities granted between BR FISC Orders and PR/TT FISC Orders 

• ( TS//S I //NF ) Recognize the role of the Bulk Metadata Programs in the context of the broader set of SIGINT authorities 
Scroll over text for foreign powers: 

( TS//S I //NF ) Under the FISA statute, a foreign power can include “a group engaged in international terrorism or activities in preparation therefore.” 



TOP SECRET//SI//NOFORN 
Page 2 of 14 




TOP SECRET//S LVNOF ORN 



DATE/PREPARER: TAP 



FRAME ID: 1020 



Topic 

( TS//S I //NF ) The Purpose of 
the Bulk Metadata Programs 

Home 



Page Classification 
TOP SECRET//S I //NOFORN 



Exit 



Glossary 



Back 



Screen Number 
2 of 12 



Next 



NEXT FRAME ID: 1030 



BACK FRAME ID: 1010 



ALT TAG: 



GRAPH IC/AV: 

( TS//S I //NF ) Possible cutaway images 
may include: 



( TS//S I //NF ) The purpose of the BR and PR/TT Bulk Metadata Programs is to support 
the Counterterrorism mission. 



( TS//S I //NF ) Bulk metadata consists of “unselected” communications events, and the 
BR and PR/TT Bulk Metadata programs complement NSA’s traditional selection-based 
intelligence collection. 



• images pertinent to telephone and 
internet communications, 
terrorism and counterterrorism, 
and legal iconography 

• image depicting notional storage 
of bulk metadata and U.S. person 
information 



( TS//S I //NF ) (OGC Attorney): The BR and PFR/TT programs are supported by two special authorities granted by the FISC which permit NSA to obtain 
telephony and internet communications bulk metadata from U.S. -based telecommunications service providers. The authority was granted by the FISC in 
support of the Counterterrorism mission to permit NSA to learn more about a terrorist target’s communications, even those terrorists potentially 
located in the United States. 



( TS//S I //NF ) Bulk metadata consists of “unselected” communications events, and the BR and PR/TT Bulk Metadata Programs complement NSA's 
traditional selection-based intelligence collection. 

( TS//S I //NF ) As you can probably imagine, bulk internet and telephony metadata, acquired within the United States, contains information to, from, or about 
U.S. persons. Therefore, because there is unminimized U.S. person information included within this type of metadata, there are special rules and 
procedures we must follow when acquiring, processing, accessing, storing, sharing, and disseminating this information. This metadata is highly sensitive 
which is why we have this specialized training. 

( TS//S I //NF ) In this course we discuss the metadata we collect, how we collect it, what we are permitted to do with it as well as other special rules and 
procedures we must follow. 
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( TS//S I //NF ) (OGC Attorney): To get started, let’s discuss the individual Bulk Metadata Programs. The BR Program pertains to the acquisition of telephony 
metadata. The associated FISC Order allows NSA to ask specific U.S.-based telecommunications service providers for their business records. The 
business records, also known as call detail records, contain information about phone calls. 



roqram and associated FISC Order permits the collection of bulk Internet communications metadata. 




( TS//S I //NF ) Under both these FISC orders, NSA is prohibitecUran^acqu™ content. Under these Progra ms, NSA may not listen to 

phone calls, or collect the body or subject of an email The Bulk Metadata authorities permit the| 

about the communications. 



( TS//S I //NF ) In Module 2, we will explore how each type of metadata is obtained and what specific information each order permits NSA to collect. 



TOP SECRET//SI//NOFORN 
Page 4 of 14 







TOP SECRET//S LVNOF ORN 



DATE/PREPARER: TAP 



FRAME ID: 1040 



Topic 

(U) ’’Touching” the data 



Home 



Exit 



NEXT FRAME ID: 1050 



BACK FRAME ID: 1030 
ALT TAG: 

GRAPH IC/AV: 



Page Classification 

TOP SECRET//SI//NOFORN 



Glossary 



Back 



( TS//S I //NF ) Possible cutaway images may 
include: 



• images pertinent to querying data 




• image of query results being 

shared, disseminated, and retained 



Screen Number 
4 of 12 



Next 



( TS//S I //NF ) (OGC Attorney): Due to the sensitivity of the data and the desire to protect the privacy of U.S. persons, the FISC imposes restrictions on how 
we can touch the data. For the purposes of this course, by “touch” we mean any activity where there is an opportunity to commit a violation with regards to 
the Orders governing these authorities. We recognize that it takes a very diverse team of individuals working to see that the data is properly acquired, 
routed, prepared, stored, then queried, shared and disseminated. From acquisition to dissemination, including management and compliance, if you play a 
role in enabling this data to be used for its intelligence value, we consider you to be someone who “touches” this data. 



( TS//S I //NF ) NSA’s goal is to provide reasonable assurance that we are complying with the law AND making the most of these authorities to support the 
counterterrorism mission and protect the United States. 



TOP SECRET//SI//NOFORN 
Page 5 of 14 



TOP SECRET//S LVNOF ORN 



DATE/PREPARER: TAP 



Topic 

( TS//S I //NF ) Similarities in the BR 



Page Classification 

TOP SECRET//SI//NOFORN 



FRAME ID: 1050 



and PR/TT Orders 

Home 



Exit 



Glossary 



Back 



NEXT FRAME ID: 1055 



BACK FRAME ID: 1040 
ALT TAG: 

GRAPH IC/AV: 



(U) Possible cutaway images may 
include: 



• images that depict the 
similarities highlighted in the 
script 

• Foreign Powers 

• RAS 



Screen Number 
5 of 12 



Next 



( TS//S I //NF ) (OGC Attorney): BR and PR/TT are two separate orders issued by the FISC, though the general access, sharing, dissemination, and retention 
rules are the same for the two programs. Those similarities are why the training for both is covered in t his course. Additionally, both Orders target the same 

swers named in the orders aref 
~ | Both the BR and PR/TT prog L 

Articulable Suspicion, or RAS, to gain approval to query the bulk metadata with an identifier. We will get into much more detail about these two topics in 
later modules. 
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( TS//S I //NF ) (OGC Attorney): There are two high level differences between the Orders as well. Details ofthedifferencesw^^ in later modules, 

but at a basic level, the biggest difference between the two Programs is how the metadata is obtained. 



( TS//S I //NF ) The other point where the Bulk Metadata Programs differ is in the area of hop restrictions for contact chaining. This will be described in detail 
in Module 4, but for now it is important to know that according to the Orders the hop restrictions are different for the BR and PR/TT Programs. 
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( TS//S I //NF ) (OGC Attorney): NSA must reapply to the FISC every 90 days to continue operating under these authorities. This process allows for the 
Government to seek modifications and for the FISC to update these authorities to reflect changes that may affect NSA's collection and handling of BR and 
PR/TT bulk metadata. It is also crucial that all factors associated with NSA's implementation of these programs are fully compliant with the FISC Orders 
and guidelines. 



( TS//S I //NF ) As new orders are issued, this training may be augmented to address significant changes. Your organization will notify you if or when 
additional training is necessary. Should you have questions, you are strongly encouraged to contact your manager, Counterterrorism (CT) Homeland 
Security Analysis Center (HSAC), Technology Directorate (TD) Compliance, SID Oversight and Compliance, or the Office of General Counsel (OGC) for 
assistance and guidance. 
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( TS//S I //NF ) NSA may perform SIGINT functions under various FISA authorities to include: 

• NSA FISA 

• FBI FISA 

• FAA Section 702 

• FAA Section 704 

• FAA Section 705(b) 

( TS//S I //NF ) BR and PR/TT Bulk Metadata Programs provide analysts with another opportunity to gain unique 
collection on a target 



( TS//S I //NF ) By leveraging various collection authorities, analysts can fill existing knowledge gaps on their 
target 



( TS//S I //NF ) (OGC Attorney): Now that you have a better understanding of what the BR and PR/TT Bulk Metadata Programs are, you may be wondering 
where these programs fit in the context of the broader set of SIGINT authorities. 

( TS//S I //NF ) Recall from OVSC1 100, the Overview of Signals Intelligence Authorities, that we learned that in addition to E.O. 12333, NSA may perform 
SIGINT functions under various FISA authorities to include NSA FISA, FBI FISA, FISA Amendments Act (FAA) Section 702, 704, and 705(b). While there 
are specific rules governing when and how these authorities may be applied, each of these authorities has the potential to provide a valuable and unique 
complement to our E.O. 12333 collection resources. Similarly, the BR and PR/TT Bulk Metadata Programs provide analysts with another opportunity to 
gain unique collection on a target. By leveraging as many of these various collection authorities available to them as permitted, analysts can fill existing 
knowledge gaps on their target. 

( TS//S I //NF ) One prime example of how an analyst leveraged several of these collection authorities to close crucial knowledge gaps on a target occurred in 
Fall 2009, when a CT analyst pieced together information obtained from E.O. 12333, FAA 702, and BR FISA authorities to reveal a terrorist plot on the New 
York subway system, which was subsequently disrupted by the FBI. 
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( TS//SI//NF ) Similarities between SPCMA and BR & PR/TT 

• (TS//SI//NF) Both involve exclusively metadata 

• (TS//SI//NF) Both allow for querying of U.S. person identifiers under specific circumstances 
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(TS//S I //NF) (OGC Attorney): It is also important to understand what the BR and PR/TT Bulk Metadata programs are not. You may have heard of SPCMA - 
the Supplemental Procedures Governing Communications Metadata Analysis. They allow NSA to treat communications metadata differently than content in 
the course of the analysis of communications metadata already lawfully collected under E.O. 12333, NSA FISA, FBI FISA, FAA 702^0Aand 705(b^^^ 
authorities. Specifically, given a valid and documented foreign intelligence purpose, these new procedures permit contact chaining, 
i^HNMHMHMHommunications metadata identifier, irrespective of nationality or location, in order to follow or discover valid foreign intelligence 
targets. What SPCMA and the BR and PR/TT programs have in common, then, is that they both exclusively involve metadata, and allow for queries of 
identifiers belonging to U.S. persons. 



(TS//SI//NF) Differences between SPCMA and BR & PR/TT 




• (TS//SI//NF) Source of the metadata 




• (TS//SI//NF) To query the 






o SPCMA procedures apply to metadata 




metadata: 






already lawfully collected under E.O. 




o SPCMA requires valid and 






12333, NSA FISA, FBI FISA, FAA 702, 704, 




documented foreign intelligence 






and 705(b) authorities 




purpose 






o BR and PR/TT programs authorize the 




o BR and PR/TT require RAS- 






acquisition of unselected, bulk metadata 




approved identifier for a limited 





















(TS//S I //NF) Unlike SPCMA, however, the BR and PR/TT Programs authorize the acquisition of unselected, bulk metadata. Because of the sensitivity of 
this metadata, it may only be queried with identifiers for which RAS exists to believe that the identifier is directly associated with the Foreign Powers 
specified in the Court Order granted by the FISC. You will learn much more about the RAS standard in Module 3. 
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(U) Knowledge Check 

1. ( TS//S I //NF ) What is the purpose of the BR and PR/TT Bulk Metadata Programs? 

a) (TS//S I //NF) To permit NSA to learn more about a terrorist target’s communications, even 
those terrorists potentially located in the United States 

b) ( TS//S I //NF ) To give NSA the authority to collect and analyze the content of foreign and domestic 
terrorist telecommunications traffic 

c) ( TS//S I //NF ) To enable NSA to more effectivel y collect and analyze telep hony and internet 
communications metadata associated with the | 

d) (U) All of the above 

2. (TS//S I //NF) The BR and PR/TT Bulk Metadata Programs enable NSA to query identifiers related to. 

a) All terrorists regardless of their affiliation and origin. 

b) Terrorists/terrorist groups associated with Foreign Powers, 

c) Any foreign intelligence target. 

d) Terrorists/terrorist groups associated with 




(U) (OGC Attorney): Let’s make a few notes in our travel journal and check to see what you remember from this topic! 



ANSWERS: 

Question 1: ( TS//S I //NF ) Correct! The purpose of the BR and PR/TT Bulk Metadata Programs is to permit NSA to learn more about a terrorist target’s 
communications, even those terrorists potentially located in the United States. 

( TS//S I //NF ) Incorrect. The correct answer is a). The purpose of the BR and PR/TT Bulk Metadata Programs is to permit NSA to learn more about a 
terrorist target’s communications, even those terrorists potentially located in the United States. 

Quest ion 2 : ( TS//S I //NF ) Correct! The BR and PR/TT Bulk Metadata Programs enable NSA to query identifiers related to terrorists/terrorist groups who fall 
under ^flForeign PowersBHMMlHBJ 

- (TS//S I //NFH ncorrect. The correct answer is_b] i JT£ i BR_and_PR/TT Bulk Metadata Programs enable NSA to query identifiers related to terrorists/terrorist 
groups who fall un der Foreign Powers! 
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3. (TS//SI//NF) One of the differences between BR and PR/TT is that the is composed of call detail 




records delivered bv the telecommunications providers, while the 


must be processed/extracted from 




live, streaming Internet communications. 
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4. (TS//SI//NF) Which of the following is true of BR and PR/TT and not other authorities? 

a) (TS//SI//NF) In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from 
U.S.-based telecommunications service providers that may not be available from other collection 
sources, and NSA can only query that metadata for counter proliferation purposes. 

b) (TS//SI//NF) In the BR and PR/TT authorities, NSA is authorized to obtain content from U.S.- 
based telecommunications service providers that may not be available from other collection 
sources, and NSA can only query that content for counterterrorism purposes. 

c) (TS//SI//NF) In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk 
from U.S.-based telecommunications service providers that may not be available from 
other collection sources, and NSA can only query that metadata for counterterrorism 
purposes. 

d) (TS//SI//NF) In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from 
foreign telecommunications service providers that may not be available from other collection 
sources, and NSA can query that intelligence for any foreign intelligence purpose. 


GRAPH IC/AV: 

(U) Knowledge checks in the travel journal 



(No audio or transcript on this page) 




Question 4: ( TS//S I //NF ) Correct! In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from U.S. -based telecommunications 
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service providers that may not be available from other collection sources, and NSA can only query that metadata for counterterrorism purposes. 
( TS//S I //NF ) Incorrect. The correct answer is c). In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from U.S. -based 
telecommunications service providers that may not be available from other collection sources, and NSA can only query that metadata for 
counterterrorism purposes. 
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(U//FOUO) Now that we have completed this module, you should be able to: 

• (TS//SI//NF) Identify the purpose of the BR and PR/TT Bulk Metadata Programs 

• (TS//SI//NF) Identify the ^jForeign Powers covered by the BR and PR/TT Foreign 
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(U//FOUO) (OGC Attorney): Now that we hav 

• (TS//SI//NF) Identify the purpose of th 
. (TS//SI//NF) Identify the ^[Foreign 

• (TS//SI//NF) Contrast the differences 

• (TS//SI//NF) Recognize the role of the 


e completed the first part of our road trip, you should be able to: 
le BR and PR/TT Bulk Metadata Programs 

3 owers covered by the BR and PR/TT Foreign Intelligence Surveillance Court (FISC) Orders 
in the authorities granted between BR FISC Orders and PR/TT FISC Orders 
s Bulk Metadata Programs in the context of the broader set of SIGINT authorities 



TOP SECRET//SI//NOFORN 
Page 14 of 14 




